As Hackers are beginning to target instant messaging(IM) programs because it's getting harder to trick people into clicking on links sent in e-mails, Microsoft released four software patches Tuesday to fix security flaws, media reported Wednesday.
The security vulnerabilities — including the one affecting MSN Messenger and Windows Live Messenger — were assigned the second-highest "important" rating.
The IM flaw would allow hackers to run malicious code on computers if users click on an instant message link inviting them to check out a video.
"If the victim accepts that invitation, that's when this vulnerability kicks in," said Amol Sarwate, manager of the vulnerability research lab at the security company Qualys Inc. in U.S.
Only one of the flaws carried the company's most severe "critical" rating, and it applies only to the Windows 2000 operating system.
To be affected, users would have to visit a Web site and install a program that could then run malicious code on their computers, said Mark Griesi, a security program manager at the Redmond-based software maker.
Microsoft recommends that all users set up their computers to receive the updates automatically.
Source:Xinhua/agencies
|